This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3137372e302f32342d3234203d3e20313436373632.roa
File:                     3131342e3131312e3137372e302f32342d3234203d3e20313436373632.roa (raw, json)
Hash identifier:          7MkVhAQ/ZLkwVh+NMEQgiOXhv9KYJmUNU5ot6ZWOSOU=
Subject key identifier:   A4:62:C6:79:63:FF:76:3F:9E:A5:C4:EB:9D:4E:AC:B2:23:1F:B4:28
Certificate issuer:       /CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D
Certificate serial:       315A7E243958AD3EF3F3301CBAD79B5695DBE44A
Authority key identifier: D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3137372e302f32342d3234203d3e20313436373632.roa
Signing time:             Tue 20 Jan 2026 02:26:09 +0000
ROA not before:           Tue 20 Jan 2026 02:21:09 +0000
ROA not after:            Tue 19 Jan 2027 02:26:09 +0000
asID:                     146762
IP address blocks:        114.111.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 19:40:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5a:7e:24:39:58:ad:3e:f3:f3:30:1c:ba:d7:9b:56:95:db:e4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D35F90D8A73FFC160A310A96BC00BEAB7DA2911D
        Validity
            Not Before: Jan 20 02:21:09 2026 GMT
            Not After : Jan 19 02:26:09 2027 GMT
        Subject: CN=A462C67963FF763F9EA5C4EB9D4EACB2231FB428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:2f:59:0f:a6:63:ed:a0:f2:cb:f2:68:0e:
                    25:41:b3:46:e3:ef:55:f1:8a:90:b9:45:5c:21:19:
                    6a:a7:e0:16:85:a4:bd:dc:e4:b6:7c:8b:97:35:cf:
                    ab:15:a5:dd:49:45:8b:5d:f8:a6:02:5d:df:cc:8f:
                    91:3d:d9:4a:a1:49:72:94:a7:cc:e8:d6:d3:87:d7:
                    ce:49:dc:a2:5d:1e:1c:52:74:80:c5:4c:69:de:71:
                    f1:61:36:8f:5e:af:a3:11:94:23:e0:04:45:3b:cd:
                    68:0f:32:fd:5c:79:fe:65:7b:dd:0a:c1:db:e5:77:
                    55:7b:6e:72:69:26:23:be:85:0c:a6:3e:87:ca:32:
                    5e:b6:11:67:de:fb:2c:b8:b3:0d:eb:a6:fa:09:73:
                    61:fc:5c:71:05:1f:24:83:24:3c:2a:7a:94:75:28:
                    78:c0:5e:08:25:e8:53:ed:e5:ef:36:f3:a8:99:a2:
                    2d:2e:e3:db:81:3e:ea:0b:52:08:61:1e:4b:aa:d0:
                    e7:5d:97:e1:ca:2e:aa:46:5a:37:23:27:7f:0a:c6:
                    86:30:0c:06:3a:4e:b8:56:98:2a:a2:4b:45:83:6a:
                    27:92:61:22:03:8e:e8:31:e1:7b:9b:55:f3:53:13:
                    0d:af:d5:83:31:48:23:0d:cd:ee:92:f6:21:53:85:
                    d8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:62:C6:79:63:FF:76:3F:9E:A5:C4:EB:9D:4E:AC:B2:23:1F:B4:28
            X509v3 Authority Key Identifier:
                keyid:D3:5F:90:D8:A7:3F:FC:16:0A:31:0A:96:BC:00:BE:AB:7D:A2:91:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D35F90D8A73FFC160A310A96BC00BEAB7DA2911D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217324035/0/3131342e3131312e3137372e302f32342d3234203d3e20313436373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.111.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:7a:45:3d:bc:e0:ea:1b:96:5e:15:f9:7d:86:97:7f:bf:35:
         74:e4:3e:e1:b2:ae:b5:63:17:97:1e:38:76:e5:53:09:e9:ee:
         f6:fa:dd:c5:d4:92:f2:c9:e3:0d:36:6e:af:5b:8d:e9:0c:85:
         1d:7e:62:e0:a7:42:7f:ea:b1:e5:8d:52:a6:b2:16:33:0f:b0:
         8f:e4:3e:5f:f0:3f:d9:71:0c:b2:55:f3:c6:1d:05:41:2b:62:
         6d:08:08:48:6f:c2:96:e0:eb:4e:20:3e:f1:46:96:0e:96:39:
         fe:f6:7b:99:71:f1:71:03:2b:9e:ac:91:2b:7d:78:93:32:50:
         22:db:3b:10:99:8a:67:6a:3e:f7:1a:b2:75:4a:79:e6:26:4e:
         d1:ab:79:aa:22:e0:67:31:d4:06:66:05:b1:f3:90:01:17:f0:
         b6:d5:82:e7:fa:a6:79:90:f6:c6:89:51:2c:9b:08:48:0b:c9:
         36:60:b8:3b:20:6f:76:f8:0c:15:2b:02:8a:5b:d0:be:3a:09:
         48:b9:e5:7d:13:88:bc:36:0e:8a:f6:a1:97:52:fb:25:ea:f4:
         03:dd:f0:b4:3c:3c:1e:71:5f:9c:f0:87:2e:28:4e:22:61:d6:
         5b:3d:42:42:80:ae:2b:63:ad:85:60:11:2e:1f:04:26:e9:2b:
         a6:d6:cd:cd
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUMVp+JDlYrT7z8zAcutebVpXb5EowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3
REEyOTExRDAeFw0yNjAxMjAwMjIxMDlaFw0yNzAxMTkwMjI2MDlaMDMxMTAvBgNV
BAMTKEE0NjJDNjc5NjNGRjc2M0Y5RUE1QzRFQjlENEVBQ0IyMjMxRkI0MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrS9ZD6Zj7aDyy/JoDiVBs0bj
71XxipC5RVwhGWqn4BaFpL3c5LZ8i5c1z6sVpd1JRYtd+KYCXd/Mj5E92UqhSXKU
p8zo1tOH185J3KJdHhxSdIDFTGnecfFhNo9er6MRlCPgBEU7zWgPMv1cef5le90K
wdvld1V7bnJpJiO+hQymPofKMl62EWfe+yy4sw3rpvoJc2H8XHEFHySDJDwqepR1
KHjAXggl6FPt5e8286iZoi0u49uBPuoLUghhHkuq0Oddl+HKLqpGWjcjJ38KxoYw
DAY6TrhWmCqiS0WDaieSYSIDjugx4XubVfNTEw2v1YMxSCMNze6S9iFThdgxAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUpGLGeWP/dj+epcTrnU6ssiMftCgwHwYDVR0j
BBgwFoAU01+Q2Kc//BYKMQqWvAC+q32ikR0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzMyNDAzNS8wL0QzNUY5MEQ4QTczRkZDMTYwQTMxMEE5NkJDMDBC
RUFCN0RBMjkxMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDM1RjkwRDhBNzNGRkMxNjBBMzEwQTk2QkMwMEJFQUI3REEyOTExRC5jZXIw
gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw
cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3MzI0MDM1LzAvMzEzMTM0MmUz
MTMxMzEyZTMxMzczNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzYz
Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAHJvsTANBgkqhkiG9w0BAQsFAAOCAQEAZnpFPbzg6huWXhX5
fYaXf781dOQ+4bKutWMXlx44duVTCenu9vrdxdSS8snjDTZur1uN6QyFHX5i4KdC
f+qx5Y1SprIWMw+wj+Q+X/A/2XEMslXzxh0FQStibQgISG/CluDrTiA+8UaWDpY5
/vZ7mXHxcQMrnqyRK314kzJQIts7EJmKZ2o+9xqydUp55iZO0at5qiLgZzHUBmYF
sfOQARfwttWC5/qmeZD2xolRLJsISAvJNmC4OyBvdvgMFSsCilvQvjoJSLnlfROI
vDYOivahl1L7Jer0A93wtDw8HnFfnPCHLihOImHWWz1CQoCuK2OthWARLh8EJukr
ptbNzQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:34:39 2026 by rpki-client